Windows 10: Defender reports numerous QNAP qsync temporary files as infected by WacAtac.B!ml. But...

Hi,

I use QNAP qsync to sync files on my PC with a private cloud, so far this worked perfectly but since a few days I experience the following:

1. Defender Icon is on « Actions needed »
2. Performed quickscan.
3. Defender reports numerous QNAP qsync temporary files e.g. "c:\doc\.qsync\qsy1046.tmp" as infected by WacAtac.B!ml.
4. Result of scan is « 0 threats found »
5. but icon stays on « actions needes »
6. Actioning "Removing files" after scan does not help. Next scan same as above.

Thanks to anybody for their assistance !

:)

 

what is Trojan:Win32/Wacatac.G!ml

Wacatac (also known as Trojan:Win32/Wacatac)
is a trojan-type infection that stealthily infiltrates computers and performs a number of malicious actions. Cyber criminals typically proliferate this malware using spam email campaigns
and fake software 'cracks'.

Windows Defender would mention the potential threat to you but it is up to you to delete it altogether from the system. Currently, if the Virus is in the Quarantine and you can delete it from there.

 

what is Trojan:Win32/Wacatac.G!ml

Whilst the virus was DETECTED on the 25th, it is likely that you were infected before this - before the Windows Defender definitions were updated. When this happens it may take a full scan or illicit activity before it will be detected.

Here is the Microsoft information for this detection
https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=Trojan:Win32/Wacatac.G!ml&ThreatID=2147749376

You will see from the link, the hacker can choose what action to take. You have to assume that pictures, videos, credit card details, etc, are all vulnerable.

 

what is Trojan:Win32/Wacatac.G!ml

hello well i noticed my windows were updated 24 and i got infected 25th, but do you know why it has different letters because i would like to know if this trojan win32 wacatac G ml do take my personal files such as recording pictures? would you be able
to see that also on the event log?